You've confused and confabulated like 11 different things there. None of what you said has anything to do with either what I said or what the law says.

The way this currently exists is basically unenfoceable because the critical terms are not even defined. It's not even ultimately intelligible, which is a prerequisite to enforcing, or even being able to tell where it does and does not apply, and whether some covered entity is or is not in compliance.